#djangorestframework
LightNews LightNews
cve-notifications.bsky.social
ID: CVE-2024-21520
CVSS V3.1: MEDIUM
Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with
tags.
#security #infosec #cve-alert
nvd.nist.gov
June 26, 2024 at 5:16 AM
cfiresim.bsky.social
FWIW, This project is on a stack of #sveltejs #sveltekit #python #django #djangorestframework along with Auth0 for Oauth2.
cfiresim.bsky.social cFIREsim - 📈 Sassy Retirement Back-testing @cfiresim.bsky.social · Mar 14
cFIREsim's successor (WIP, not released in any way), a financial/retirement planner that simulates outcomes.

I have it handling account types, taxes, the concept of people attached to those things, etc.

UI is tough for me, and I'm consolidating outputs, but it's coming along.
March 15, 2025 at 1:21 AM
desertthunder.dev
My favorite meme of all time
#python #unittest #django #djangorestframework
November 17, 2024 at 5:10 AM
robotichead.bsky.social
How do we test our API? Well I honestly don't know, so lets figure it out.

twitch.tv/robotichead

#buildinpublic #python #api #django #djangorestframework
Twitch
Twitch is the world
twitch.tv
March 17, 2025 at 8:06 AM
mendes.software
Um negócio que acho paia de Django é a loucura do DjangoRESTFramework.

Existem 5000 formas diferentes de fazer crud sem tanta complexidade ciclomática. E como não é um framework progressivo, fica lá uma caralhada de coisa de front inútil
September 7, 2024 at 12:46 PM
partizan.twiukraine.com.ap.brid.gy
Not sure what's happening with Django Rest Framework, but it sounds like "go fuck yourself".

Is there some sort of community-maintained fork, which accepts contributions?

https://github.com/encode/django-rest-framework/pull/9560

#django #djangorestframework
We can see the behavior change. The cost is not worthwhile in my judgement. More to the point I think what @tomchristie is actually suggesting is that they're no longer willing to tolerate either intentional or unintentional social DDOS'ing from internet anons. Somehow this became a dominant theme within OSS development. As it stands REST framework will not be accepting further contributions.
February 19, 2025 at 2:39 PM
unixgeek.com
I worked on an established #Django project for 2 years but it was 4 years ago so refreshing my knowledge via tutorial.

Will be overly basic to most, but keeping up the fundamentals is my happy place.

Next: #RemixJS/#ReactRouter 7, #DjangoRestFramework, and #HTMX. Not necessarily in that order.
November 30, 2024 at 4:03 PM
eshat.bsky.social
5. Browsable API
6. Strong community
7. Customizable
8. In-demand skill

DRF: Scalable REST APIs with Django power. Essential for modern web dev!

What's your fav DRF feature? Let's connect.

#DjangoRestFramework #WebDev #FullStack #API #Python #Django
December 16, 2024 at 6:27 PM
makina-corpus.com
Vous souhaitez devenir un pro de #DjangoRestFramework ? Découvrez la série d'articles de Yannick Chabbert ! http://makina-corpus.com/blog/metier/2015/django-rest-framework-les-serializer-et-les-exceptions-partie-1/?utm_source=Twitter&utm_medium=Social&utm_campaign=Camille
Django Rest Framework : les Serializer et les exceptions (partie 1) | Makina Corpus
Django Rest Framework est une extension à Django pour développer rapidement des API REST robustes au goût du jour. Reprenant la philosophie Django, la prise en main est rapide et efficace. Néanmoins, certaines notions nécessitent une attention plus particulière que nous allons mettre en avant dans cette suite d'articles.
makina-corpus.com
December 13, 2024 at 8:02 AM
jmduke.com
There's something deeply calming about dependency files that contain more comments than dependencies. (We're not there yet, but we're getting there!)
# NOTE: this is a ~*~ BUTTONDOWN ~*~ third-party package that we maintain. "django-typescript-routes>=0.1.1", "django-vite>=3.0.4", # WARNING: No new code should use DRF. All new views should be written using Django-Ninja. "djangorestframework>=3.15.1", "dnspython>=2.6.1", "redis==4.5.3", "feedparser>=6.0.11", # Switched from premailer to css-inline because premailer does not respect !important. # https://github.com/peterbe/premailer/issues/273 "css-inline>=0.14.1", # We pulled this in to handle parsing of Outlook-style .msg files (note that this is _not_ # used for `.vcf` files — we hand-rolled out own parsing logic for that.) It is honestly pretty # brittle and janky for our limited use case of it, and might be a good candidate for a rewrite # in the future. "extract-msg>=0.48.5", # We don't directly use this anywhere; it's an implicit dependency of `allauth` and when # we bumped allauth to 0.63.0 we needed to b
July 13, 2024 at 5:04 PM